Typical applications for the USG6000 served as a DHCP relay

15

The USG6000 DHCP client and DHCP server are in different network segments. The DHCP relay is deployed in the network segment where the DHCP client resides. The DHCP client can communicate with the DHCP server over the DHCP relay and obtain configuration information such as IP address from the DHCP server.

Other related questions:
Application scenarios for the USG6000 served as a DHCP server
When the USG6000 serves as a DHCP server, the typical application scenarios are as follows: ?The DHCP client and the DHCP server are in the same network segment: The firewall serves as the DHCP server that is connected to the DHCP client through the L2 switch (or hub). ?The DHCP client and the DHCP server are in different network segments: The DHCP server needs to cooperate with a DHCP relay to dynamically allocate IP addresses in different network segments.

USG6000 DHCP typical networking
The USG6000 DHCP adopts the client/server mode. The DHCP client dynamically requests for network configuration information from the DHCP server, and the DHCP server returns the corresponding configuration information (IP address, subnet mask, and default gateway) based on configured strategies. The typical DHCP network includes the following roles: ?DHCP Client: Device requesting for network parameters such as IP address using the DHCP ?DHCP Server: Device allocating network parameters to the DHCP client and processing address allocation, address lease renewal, and address release requests from the DHCP client or DHCP relay ?(Optional) DHCP Relay: Device forwarding DHCP packets between the DHCP server and the DHCP client, and assisting the DHCP server in dynamically allocating network parameters to the DHCP client

Application scenarios where the USG6000 serves as the DNS Client
The firewall serves as the DNS Client and uses DNS to dynamically obtain the IP address corresponding to the domain name for user communications. When the firewall executes the following services, it can serve as the DNS Client to send DNS request packets to the DNS Server. Perform the ping or tracert operation in domain name mode. Access the security center platform in domain name mode to update the signature database. Access the CA server in domain name mode to obtain the certificate online.

Whether the USG6000 virtual firewall supports DHCP
The USG6000 virtual system supports configuring DHCP and DHCP relay but not DHCPv6 or DHCP Snooping. The configuration commands are the same as those for the root system. For details, see the DHCP chapter of the product documentation.

Method used to configure DHCP relay on the AR
When the DHCP server and DHCP clients are on different network segments, the DHCP relay agent can be configured so that the DHCP server can assign IP addresses to the DHCP clients. Procedure: 1. Configure the router # sysname Router # dhcp enable //Enable the DHCP function. # ip pool ip-pool1 gateway-list 10.10.1.1 //Set the gateway IP address. network 10.10.1.0 mask 255.255.255.128 //Specify the range of IP addresses that can be dynamically allocated in the global address pool. excluded-ip-address 10.10.1.2 //Set the IP address 10.10.1.2 that is not assigned automatically in the address pool. excluded-ip-address 10.10.1.4 //Set the IP address 10.10.1.4 that is not assigned automatically in the address pool. dns-list 10.10.1.2 //Configure the IP address of the DNS server for the DHCP client. nbns-list 10.10.1.4 //Configure the IP address of the NetBIOS server for the DHCP client. lease day 10 hour 12 minute 0 //Set the IP address lease to 10 days and 12 hours. domain-name huawei.com //Set the domain name to huawei.com. static-bind ip-address 10.10.1.5 mac-address fc12-2567-ce34 //Assign a fixed IP address to the PC_AD. # ip pool ip-pool2 gateway-list 10.10.1.129 //Set the gateway IP address. network 10.10.1.128 mask 255.255.255.128 //Specify the range of IP addresses that can be dynamically allocated in the global address pool. dns-list 10.10.1.2 //Configure the IP address of the DNS server for the DHCP client. lease day 5 hour 0 minute 0 //Set the IP address lease to 5 days. domain-name huawei.com //Set the domain name to huawei.com. # interface GigabitEthernet0/0/0 ip address 10.10.1.1 255.255.255.128 dhcp select global //Configure the global address pool mode. # interface GigabitEthernet0/0/1 ip address 10.10.1.129 255.255.255.128 dhcp select global //Configure the global address pool mode. 2. Verify the configuration. Run the display ip pool command on the router to check the IP address pool configuration.

If you have more questions, you can seek help from following ways:
To iKnow To Live Chat
Scroll to top